Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.772exploits catalogados

35.760CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.455Referência 22.523GitHub PoC 14.289VulnCheck XDB 8.710Nuclei 4.319Metasploit 3.476✓ só verificadosrecentes populares risco

22.523 exploits

Referência

CVE-2014-100015

CVE-2014-100015—

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write t

50RISCO

abrir ↗

Referência

CVE-2017-7185

CVE-2017-7185—

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embed

28RISCO

abrir ↗

Referência

CVE-2015-1375

CVE-2015-1375—

pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload

28RISCO

abrir ↗

Referência

CVE-2019-17554

CVE-2019-17554—

The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resoluti

28RISCO

abrir ↗

Referência

CVE-2018-15705

CVE-2018-15705—

WADashboard API in Advantech WebAccess 8.3.1 and 8.3.2 allows remote authenticated attackers to write or overwrite any f

28RISCO

abrir ↗

Referência

CVE-2020-15500

CVE-2020-15500—

An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected u

43RISCO

abrir ↗

Referência

CVE-2018-5406

CVE-2018-5406—

The Quest Kace K1000 Appliance misconfigures the Cross-Origin Resource Sharing (CORS) mechanism.

28RISCO

abrir ↗

Referência

CVE-2013-6021

CVE-2013-6021—

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code

28RISCO

abrir ↗

Referência

CVE-2011-4153

CVE-2011-4153—

PHP 5.3.8 does not always check the return value of the zend_strndup function, which might allow remote attackers to cau

28RISCO

abrir ↗

Referência

CVE-2014-100015

CVE-2014-100015—

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write t

50RISCO

abrir ↗

Referência

CVE-2014-100015

CVE-2014-100015—

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write t

50RISCO

abrir ↗

Referência

CVE-2017-9024

CVE-2017-9024—

Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3.0, has a Directory Tra

28RISCO

abrir ↗

Referência

CVE-2013-4863

CVE-2013-4863—

The HomeAutomationGateway service in MiCasaVerde VeraLite with firmware 1.5.408 allows (1) remote attackers to execute a

28RISCO

abrir ↗

Referência

CVE-2013-1300

CVE-2013-1300—

win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, W

43RISCO

abrir ↗

Referência

CVE-2018-6397

CVE-2018-6397—

Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter.

28RISCO

abrir ↗

Referência✓ VexDay Proof

Adobe Acrobat 9 - ActiveX Remote Denial of Service

CVE-2008-4071—doswindows

A certain ActiveX control in Adobe Acrobat 9, when used with Microsoft Windows Vista and Internet Explorer 7, allows rem

28RISCO

abrir ↗

Referência

CVE-2019-7385

CVE-2019-7385—

An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and

28RISCO

abrir ↗

Referência

CVE-2024-8956

CVE-2024-8956CRITICALsob ataque

PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication

90RISCO

abrir ↗

Referência

CVE-2016-1741

CVE-2016-1741—

The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary c

28RISCO

abrir ↗

Referência

CVE-2017-5358

CVE-2017-5358—

Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbi

28RISCO

abrir ↗

Referência

CVE-2017-5358

CVE-2017-5358—

Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbi

28RISCO

abrir ↗

Referência

CVE-2022-28213

CVE-2022-28213—

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does n

28RISCO

abrir ↗

Referência

CVE-2012-5306

CVE-2012-5306—

Stack-based buffer overflow in the SelectDirectory method in DcsCliCtrl.dll in Camera Stream Client ActiveX Control, as

28RISCO

abrir ↗

Referência

CVE-2021-36356

CVE-2021-36356—

KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary code because ajaxPages/writeBrowseFilePa

50RISCO

abrir ↗

Referência

CVE-2025-15471

CVE-2025-15471CRITICAL

TRENDnet TEW-713RE formFSrvX os command injection

53RISCO

abrir ↗

Referência

CVE-2013-10048

CVE-2013-10048CRITICAL

D-Link Devices command.php Unauthenticated RCE

68RISCO

abrir ↗

Referência

CVE-2013-10048

CVE-2013-10048CRITICAL

D-Link Devices command.php Unauthenticated RCE

68RISCO

abrir ↗

Referência

CVE-2013-10048

CVE-2013-10048CRITICAL

D-Link Devices command.php Unauthenticated RCE

68RISCO

abrir ↗

Referência

CVE-2013-10048

CVE-2013-10048CRITICAL

D-Link Devices command.php Unauthenticated RCE

68RISCO

abrir ↗

Referência

CVE-2017-9675

CVE-2017-9675—

On D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET request to trigger a reboot.

28RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.